CVE Hunters on Natan Maia Morette

CVE-2025-9823: Reflected XSS in lead:addLeadTags - Quick Add

Wed, 03 Sep 2025 00:00:00 -0300

⚠ Replicated advisory. This post reproduces an advisory originally researched and published under the CVE Hunters. It is republished here for reference. The original disclosure followed coordinated vulnerability disclosure and the rules of the CVE Program.

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-9823/
📋 CVE record: CVE-2025-9823

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-9823

Vendor

Mautic is an open-source marketing automation platform used worldwide.

https://mautic.org/

Affected Product Code Base

Affected versions:

= 4.4.0, < 4.4.17 = 5.0.0-alpha, < 5.2.8 = 6.0.0-alpha, < 6.0.5 Patched versions: 4.4.17, 5.2.8, 6.0.5

CVE-2025-9404: Storage Cross-Site Scripting (XSS) in endpoint pointHIerarchySLTS parameter title

Mon, 25 Aug 2025 00:00:00 -0300

🔗 Original advisory: https://github.com/CVE-Hunters/CVE/blob/main/Scada-LTS/Stored%20XSS%20endpoint%20pointHierarchySLTS%20parameter%20title.md
📋 CVE record: CVE-2025-9404

Summary

Stored Cross-Site Scripting (XSS) vulnerability was identified in the pointHIerarchySLTS endpoint. This vulnerability allows attackers to inject malicious scripts into the username parameter. The injected scripts are stored on the server and executed automatically whenever the page pointHIerarchySLTS is accessed by users, posing a significant security risk.

CVE-2025-9139: Sensitive User Information Disclosure via WatchListDwr.init.dwr Endpoint

Tue, 19 Aug 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-9139/
📋 CVE record: CVE-2025-9139

Summary

A vulnerability was identified in the WatchListDwr.init.dwr endpoint of SCADA-LTS that allows any authenticated user, even with minimal permissions, to access sensitive user information including usernames, emails, phone numbers, and admin status. This flaw constitutes an Information Disclosure issue and could be used to facilitate further attacks such as phishing, privilege escalation, or social engineering.

CVE-2025-8789: Broken Function Level Authorization (BFLA) allows unauthorized users to alter student grades

Sun, 10 Aug 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-8789/
📋 CVE record: CVE-2025-8789

Summary

An API endpoint in i-Educar 2.9.0 is vulnerable to Broken Function Level Authorization (BFLA). An unauthorized user is able to modify student grades by directly accessing the /module/Api/Diario endpoint, bypassing permission controls. This leads to severe integrity issues, where anyone with access to the API format can tamper with academic records.

CVE-2025-8790: Broken Object Level Authorization (BOLA) in pessoa API Endpoint Allows Unauthorized Access to Other Users Data

Sun, 10 Aug 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-8790/
📋 CVE record: CVE-2025-8790

Summary

A Broken Object Level Authorization (BOLA) vulnerability was identified in the i-educar 2.8 and 2.9 API, allowing any authenticated low-privileged user to access sensitive information from other users by manipulating the id parameter in the pessoa resource endpoint.

CVE-2025-8510: Reflected Cross-Site Scripting (XSS) in educar_matricula_lst.php via ref_cod_aluno Parameter

Sun, 03 Aug 2025 00:00:00 -0300

🔗 Original advisory: https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8510%20.md
📋 CVE record: CVE-2025-8510

Summary

A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the atendidos_cad.php endpoint of the i-educar application 2.10. This vulnerability allows attackers to inject malicious scripts in the ref_cod_alunoparameter.

Details

Vulnerable Endpoint: educar_matricula_lst.php Parameter: ref_cod_aluno

CVE-2025-8346: Cross-Site Scripting (XSS) Reflected endpoint educar_aluno_lst.php via ref_cod_matricula parameter

Thu, 31 Jul 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-8346/
📋 CVE record: CVE-2025-8346

Summary

A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the educar_aluno_lst.php endpoint of the i-Educar application. This vulnerability allows attackers to inject malicious scripts into the ref_cod_matricula parameter.

Details

Vulnerable Endpoint: educar_aluno_lst.php

CVE-2025-8365: Multiples Cross-Site Scripting (XSS) Stored in endpoint atendidos_cad.php

Thu, 31 Jul 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-8365/
📋 CVE record: CVE-2025-8365

Summary

Multiples Stored Cross-Site Scripting (XSS) vulnerabilities was identified in the atendidos_cad.php endpoint of the i-Educar application. This vulnerability allows attackers to inject malicious scripts into the nome, nome_social and email parameters. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk.

CVE-2025-7870: Cross-Site Scripting (XSS) Storage Injection via SVG Upload

Sun, 20 Jul 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-7870/
📋 CVE record: CVE-2025-7870

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-7870

Summary

An attacker can upload a malicious SVG file containing embedded JavaScript that is executed when the file is accessed directly. This results in Stored Cross-Site Scripting (XSS).

CVE-2025-7871: Cross-Site Scripting (XSS) Reflected endpoint conteudos parameter filter[by_description]

Sun, 20 Jul 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-7871/
📋 CVE record: CVE-2025-7871

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-7871

Summary

A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the conteudos endpoint of the i-Diário application. This vulnerability allows attackers to inject malicious scripts into the filter[by_description] parameter.

CVE-2025-7728: Cross-Site Scripting (XSS) Stored endpoint users.shtm parameter username

Thu, 17 Jul 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-7728/
📋 CVE record: CVE-2025-7728

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-7728

Summary

A Stored Cross-Site Scripting (XSS) vulnerability was identified in the users.shtm endpoint of the Scada-LTS application. This vulnerability allows attackers to inject malicious scripts into the usernameparameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk.

CVE-2025-7729: Cross-Site Scripting (XSS) Stored endpoint usersProfiles.shtm parameter userprofilename

Thu, 17 Jul 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-7729/
📋 CVE record: CVE-2025-7729

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-7729

Summary

A Stored Cross-Site Scripting (XSS) vulnerability was identified in the usersProfiles.shtm endpoint of the Scada-LTS application. This vulnerability allows attackers to inject malicious scripts into the userprofilenameparameter. The injected scripts are stored on the server and executed automatically whenever the affected page is accessed by users, posing a significant security risk.

CVE-2025-53527: SQL Injection Vulnerability in tipo and responsavel Parameters on relatorio_geracao.php Endpoint

Mon, 07 Jul 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-53527/
📋 CVE record: CVE-2025-53527

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-53527

Summary

A SQL Injection vulnerability was identified in the tipo and responsavel parameters of the /controle/relatorio_geracao.php endpoint. This vulnerability allows attacker to manipulate SQL queries and access sensitive database information, such as table names and sensitive data.

CVE-2025-53091: Unauthenticated Time-Based SQL Injection Vulnerability in almox Parameter

Fri, 27 Jun 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-53091/
📋 CVE record: CVE-2025-53091

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-53091

Summary

A Time-Based Blind SQL Injection vulnerability was discovered in the almox parameter of the /controle/getProdutosPorAlmox.php endpoint. This issue allows any unauthenticated attacker to inject arbitrary SQL queries, potentially leading to unauthorized data access or further exploitation depending on database configuration.

CVE-2025-52474: SQL Injection Vulnerability in id Parameter on control.php Endpoint

Thu, 19 Jun 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-52474/
📋 CVE record: CVE-2025-52474

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-52474

Summary

A SQL Injection vulnerability was identified in the id parameter of the /WeGIA/controle/control.php endpoint. This vulnerability allows attacker to manipulate SQL queries and access sensitive database information, such as table names and sensitive data.

CVE-2025-30366: Multiples Stored XSS in personalizacao.php

Thu, 27 Mar 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-30366/
📋 CVE record: CVE-2025-30366

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-30366

Summary

Multiples stored Cross-Site Scripting (XSS) vulnerability was identified in the WeGIA application. This vulnerability allows unauthorized scripts to be executed within the user's browser context. Stored XSS is particularly critical, as the malicious code is permanently stored on the server and executed whenever a compromised page is loaded, affecting all users accessing this page.

CVE-2025-30367: SQL Injection endpoint control.php parameter nextPage

Thu, 27 Mar 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-30367/
📋 CVE record: CVE-2025-30367

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-30367

Summary

A SQL Injection vulnerability was identified in the WeGIA application, specifically in the control.php endpoint. This vulnerability allows attackers to execute arbitrary SQL commands in the database, allowing unauthorized access to sensitive information. During the exploit, it was possible to perform a complete dump of the application's database, highlighting the severity of the flaw.

CVE-2024-57030: Cross-Site Scripting (XSS) Stored in documentos_funcionario.php parameter id

Fri, 17 Jan 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2024-57030/
📋 CVE record: CVE-2024-57030

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2024-57030

Vendor

WeGIA (Web Gerenciador Institucional) is an integrated management system licensed under the GNU GPL v3.0, designed to enhance administration, control, and transparency for institutions.

https://www.wegia.org

https://sol.sbc.org.br/index.php/latinoware/article/view/31544

CVE-2024-57031: SQL Injection (Blind Time-Based) in remuneracao.php parameter id_funcionario

Fri, 17 Jan 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2024-57031/
📋 CVE record: CVE-2024-57031

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2024-57031

Vendor

WeGIA (Web Gerenciador Institucional) is an integrated management system licensed under the GNU GPL v3.0, designed to enhance administration, control, and transparency for institutions.

https://www.wegia.org

https://sol.sbc.org.br/index.php/latinoware/article/view/31544

CVE-2024-57032: Broken Authentication - Old Password

Fri, 17 Jan 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2024-57032/
📋 CVE record: CVE-2024-57032

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2024-57032

Vendor

WeGIA (Web Gerenciador Institucional) is an integrated management system licensed under the GNU GPL v3.0, designed to enhance administration, control, and transparency for institutions.

https://www.wegia.org

https://sol.sbc.org.br/index.php/latinoware/article/view/31544

CVE-2024-57033: Cross-Site Scripting (XSS) Stored in documentos_funcionario.php parameter dados_addInfo

Fri, 17 Jan 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2024-57033/
📋 CVE record: CVE-2024-57033

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2024-57033

Vendor

WeGIA (Web Gerenciador Institucional) is an integrated management system licensed under the GNU GPL v3.0, designed to enhance administration, control, and transparency for institutions.

https://www.wegia.org

https://sol.sbc.org.br/index.php/latinoware/article/view/31544

CVE-2024-57034: SQL Injection in query_geracao_auto.php

Fri, 17 Jan 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2024-57034/
📋 CVE record: CVE-2024-57034

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2024-57034

Vendor

WeGIA (Web Gerenciador Institucional) is an integrated management system licensed under the GNU GPL v3.0, designed to enhance administration, control, and transparency for institutions.

https://www.wegia.org

https://sol.sbc.org.br/index.php/latinoware/article/view/31544

CVE-2024-57035: SQL Injection Vulnerability in nextPage Parameter on control.php Endpoint

Fri, 17 Jan 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2024-57035/
📋 CVE record: CVE-2024-57035

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2024-57035

Vendor

WeGIA (Web Gerenciador Institucional) is an integrated management system licensed under the GNU GPL v3.0, designed to enhance administration, control, and transparency for institutions.

https://www.wegia.org

https://sol.sbc.org.br/index.php/latinoware/article/view/31544

CVE-2025-22599: Cross-Site Scripting (XSS) Reflected endpoint home.php parameter msg_c

Fri, 10 Jan 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-22599/
📋 CVE record: CVE-2025-22599

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-22599

Summary

A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the home.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msg_c parameter.

CVE-2025-22600: Cross-Site Scripting (XSS) Reflected endpoint configuracao_doacao.php parameter avulso

Fri, 10 Jan 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-22600/
📋 CVE record: CVE-2025-22600

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-22600

Summary

A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the configuracao_doacao.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the avulso parameter.

CVE-2025-22139: Cross-Site Scripting (XSS) Reflected endpoint configuracao_geral.php parameter msg

Wed, 08 Jan 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-22139/
📋 CVE record: CVE-2025-22139

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-22139

Summary

A Reflected Cross-Site Scripting (XSS) vulnerability was identified in the configuracao_geral.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in the msg_c parameter.

CVE-2025-22132: Cross-Site Scripting (XSS) in File Upload Field

Tue, 07 Jan 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-22132/
📋 CVE record: CVE-2025-22132

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-22132

Vendor

WeGIA (Web Gerenciador Institucional) is an integrated management system licensed under the GNU GPL v3.0, designed to enhance administration, control, and transparency for institutions.

https://www.wegia.org

https://sol.sbc.org.br/index.php/latinoware/article/view/31544

CVE-2025-22133: Arbitrary File Upload with Remote Code Execution (RCE)

Tue, 07 Jan 2025 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2025-22133/
📋 CVE record: CVE-2025-22133

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2025-22133

Summary

A critical vulnerability was identified in the following endpoint:

/WeGIA/html/socio/sistema/controller/controla_xlsx.php

The endpoint accepts file uploads without proper validation, allowing the upload of malicious files, such as .phar, which can then be executed by the server.

CVE-2024-53473: Broken Access Control

Sat, 07 Dec 2024 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2024-53473/
📋 CVE record: CVE-2024-53473

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2024-53473

Vendor

WeGIA (Web Gerenciador Institucional) is an integrated management system licensed under the GNU GPL v3.0, designed to enhance administration, control, and transparency for institutions.

https://www.wegia.org

https://sol.sbc.org.br/index.php/latinoware/article/view/31544

CVE-2024-53470: Stored XSS in gateway_pagamento.php function

Thu, 05 Dec 2024 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2024-53470/
📋 CVE record: CVE-2024-53470

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2024-53470

Vendor

WeGIA (Web Gerenciador Institucional) is an integrated management system licensed under the GNU GPL v3.0, designed to enhance administration, control, and transparency for institutions.

https://www.wegia.org

https://sol.sbc.org.br/index.php/latinoware/article/view/31544

CVE-2024-53471: Stored XSS in meio_pagamento.php function

Thu, 05 Dec 2024 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2024-53471/
📋 CVE record: CVE-2024-53471

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2024-53471

Vendor

WeGIA (Web Gerenciador Institucional) is an integrated management system licensed under the GNU GPL v3.0, designed to enhance administration, control, and transparency for institutions.

https://www.wegia.org

https://sol.sbc.org.br/index.php/latinoware/article/view/31544

CVE-2024-53472: CSRF in control.php to change password

Thu, 05 Dec 2024 00:00:00 -0300

🔗 Original advisory: https://www.cvehunters.com/p/cve-2024-53472/
📋 CVE record: CVE-2024-53472

CVE Publication: https://www.cve.org/CVERecord?id=CVE-2024-53472

Vendor

WeGIA (Web Gerenciador Institucional) is an integrated management system licensed under the GNU GPL v3.0, designed to enhance administration, control, and transparency for institutions.

https://www.wegia.org

https://sol.sbc.org.br/index.php/latinoware/article/view/31544